Policy schedule end notification

[jlg]

I have a policy scheduled to run for 50 days, is there a way to get a notification at the end of the schedule time period when the policy goes inactive/disabled?

[hshah]

Hi Jlg,

I am not sure, but you may want to check system log for the same. If firewall has generated any notification it has to be in system log.

Regards,

Hardik Shah

[pulukas]

Just ran a quick test on the lab box.  And there is NO syslog event for the end of a schedule applied to an active policy.

I don't think there is any way to alarm on this.

[HULK]

Hello Steven,

You are correct. I did the test in my local PAN FW and received the same result.

Thanks

[hyadavalli]

Hello,

You can clone the policy and with no schedule set the action to deny and associate a tag to it.

Use the above tag in alarms under 'security policy group limits' and also enable web alarm notifications.

Hope this helps.

Regards,

Hari Yadavalli